Summary: | stack smashing attack in gaim after login -> cairo-1.0.2 | ||
---|---|---|---|
Product: | Gentoo Linux | Reporter: | Attila Stehr <as.gentoo> |
Component: | Current packages | Assignee: | Gentoo Net-im project <net-im> |
Status: | RESOLVED DUPLICATE | ||
Severity: | critical | CC: | hardened, security-audit, vapier |
Priority: | High | ||
Version: | 2005.1 | ||
Hardware: | AMD64 | ||
OS: | Linux | ||
Whiteboard: | |||
Package list: | Runtime testing required: | --- |
Description
Attila Stehr
2006-01-09 11:14:42 UTC
ups ... is this a duplicate of the following report? http://bugs.gentoo.org/show_bug.cgi?id=109480 yes ... vanilla gaim hasn't got this problem altering summary to "gaim crashes -> cairo-1.0.2 needs vanilla gcc on AMD64" and adding hardened team to CC list sorry, correction: using vanilla CAIRO solves the problem and a better summary here too sorry for bug-spamming :-( This is probably a security problem. filtering ssp is probably the wrong thing todo. |